$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa File: a8ed961d-5255-381f-8d85-fa082487a432.roa (raw, json) Hash identifier: trFAwN/k81pfUENafAEC+G3ULsHyMTs7p3Q6xIDrRKU= Subject key identifier: AC:48:CF:58:52:5D:0F:24:01:57:15:53:97:C3:D2:52:41:F9:8A:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201F31D5E5088B23C7C8100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.18.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f3:1d:5e:50:88:b2:3c:7c:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=adc69e5c-2c8c-4723-90a9-8ce34ef4eabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:1e:6c:58:c1:32:8b:f5:be:81:5a:bf:63: 4d:dd:8f:66:13:a5:37:bf:3f:a3:80:5f:02:78:62: fb:28:c5:63:12:f9:37:ff:ff:98:d6:08:5a:90:b8: 69:77:67:f4:dd:88:13:70:b8:fb:b1:92:cc:85:ea: eb:b6:ec:09:3d:ea:d9:5d:15:50:d7:a5:10:bb:d5: cf:c2:94:cc:35:1e:24:8f:3f:59:03:c2:08:e4:1a: ae:c1:35:ea:95:90:e0:9c:40:f9:e8:20:15:e3:14: 85:03:88:12:1c:cd:8a:64:73:51:c1:ec:76:dc:7c: 23:29:64:45:f7:fe:fa:8d:c1:c5:63:e7:32:61:49: 60:94:bc:85:59:df:8c:02:21:73:88:12:03:c8:c0: e1:30:94:33:83:04:61:90:8d:05:28:af:8a:e2:de: 7e:2a:6d:67:c2:dd:2d:32:74:6e:71:0c:17:72:64: a9:64:3d:23:2c:95:e9:7e:bf:e5:52:59:c2:ef:ba: a3:0d:c2:36:39:71:de:f4:b5:60:0d:9b:49:df:b8: 8b:c6:b3:aa:51:c9:6b:8d:d5:14:0f:47:33:8c:90: 38:c6:ce:a7:dc:79:c7:01:66:c9:48:18:fd:76:d3: 93:64:d5:82:fb:ee:75:d1:82:c0:dc:ad:5c:49:e1: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:CF:58:52:5D:0F:24:01:57:15:53:97:C3:D2:52:41:F9:8A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:54:51:92:8e:96:f8:01:21:69:75:54:d3:45:e7:36:05:50: b0:23:64:3a:bb:8e:e6:58:73:e7:4c:93:9f:a9:16:9f:69:3c: 3e:b9:e4:4b:5b:15:12:9e:9a:90:4a:29:c5:c8:51:77:d5:12: 64:91:0e:00:5e:c9:bf:63:1f:ba:8a:9f:dc:cd:3c:d7:8a:9e: 1c:09:26:4e:6d:61:33:19:d5:43:ad:51:a3:c2:fd:21:66:5e: a9:bf:07:e5:c5:d0:ff:08:03:b7:ac:1f:dd:12:6e:28:8f:da: 29:6d:ba:a3:03:4a:71:10:9b:ab:93:40:29:7c:8f:1d:0c:1e: a0:a7:3f:4c:09:42:47:b8:70:a6:c7:3f:de:f2:3c:3d:3a:c3: 85:c0:26:07:45:c6:7a:8a:45:2f:4e:92:ba:01:50:9f:79:ad: fc:f4:6d:3d:a4:09:a7:b6:eb:f9:80:2d:2c:7c:88:a3:5a:21: 8d:bc:09:c2:88:e9:67:d0:f7:04:74:f0:64:08:ee:f0:72:25: 91:5b:a9:24:7f:c5:0d:24:90:0c:c8:4a:02:42:59:b0:53:67: 6c:3d:86:d9:82:d4:46:55:49:80:ec:d2:db:ef:ee:8d:d1:f1: 9b:99:62:16:7b:b7:94:1d:d6:fe:eb:7e:03:fb:0a:71:3f:1b: 56:4b:7f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfMdXlCIsjx8gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWRjNjllNWMtMmM4Yy00NzIzLTkwYTktOGNlMzRlZjRlYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAebFjBMov1voFav2NN3Y9mE6U3vz+jgF8C eGL7KMVjEvk3//+Y1ghakLhpd2f03YgTcLj7sZLMherrtuwJPerZXRVQ16UQu9XP wpTMNR4kjz9ZA8II5BquwTXqlZDgnED56CAV4xSFA4gSHM2KZHNRwex23HwjKWRF 9/76jcHFY+cyYUlglLyFWd+MAiFziBIDyMDhMJQzgwRhkI0FKK+K4t5+Km1nwt0t MnRucQwXcmSpZD0jLJXpfr/lUlnC77qjDcI2OXHe9LVgDZtJ37iLxrOqUclrjdUU D0czjJA4xs6n3HnHAWbJSBj9dtOTZNWC++510YLA3K1cSeHZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxIz1hSXQ8kAVcVU5fD0lJB+YoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYThlZDk2MWQtNTI1NS0z ODFmLThkODUtZmEwODI0ODdhNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJUUZKOlvgBIWl1VNNF5zYFULAjZDq7juZYc+dMk5+pFp9pPD655Etb FRKempBKKcXIUXfVEmSRDgBeyb9jH7qKn9zNPNeKnhwJJk5tYTMZ1UOtUaPC/SFm Xqm/B+XF0P8IA7esH90SbiiP2iltuqMDSnEQm6uTQCl8jx0MHqCnP0wJQke4cKbH P97yPD06w4XAJgdFxnqKRS9OkroBUJ95rfz0bT2kCae26/mALSx8iKNaIY28CcKI 6WfQ9wR08GQI7vByJZFbqSR/xQ0kkAzISgJCWbBTZ2w9htmC1EZVSYDs0tvv7o3R 8ZuZYhZ7t5Qd1v7rfgP7CnE/G1ZLfyw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:42 2025 by rpki-client